Fortisandboxcloud
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortisandboxcloud:23.4:*:*:*:*:*:*:*
part: a version: 23.4 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortisandboxcloud (723b99c3-2638-5aa6-8c75-095e1cb7987a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-39813 |
vulnerable | 2026-06-08 08:01:17.030471 |
Details available
CRITICAL (9.1)
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.
Published: 2026-04-14T15:38:30.311Z
Updated: 2026-06-18T09:01:15.877Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53679 |
vulnerable | 2026-06-08 07:31:14.913816 |
Details available
MEDIUM (6.9)
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox Cloud 24.1, FortiSandbox Cloud 23 all versions allows a remote privileged attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests.
Published: 2025-12-09T17:19:51.110Z
Updated: 2026-02-26T16:56:59.835Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.